Part 17
Defending Tool-Using Agents Against Prompt Injection by Design
Why model-level filters can't stop prompt injection, and how control/data separation, taint tracking and sink policies make attacks harmless.
Defend agents against prompt injection and keep personal data away from models.
Part 17
Why model-level filters can't stop prompt injection, and how control/data separation, taint tracking and sink policies make attacks harmless.
Part 18
A layered design for detecting, pseudonymizing and re-identifying PII before it reaches a model, and how to measure the leak rate honestly.